CVE-2026-89744 Linux Kernel - Denial of Service

Linux kernel contains an infinite loop vulnerability in fwnode_for_each_child_node() caused by incorrect handling of secondary fwnode children in fwnode_get_next_child_node(), letting attackers cause denial of service by infinite iteration, exploit requires crafted device tree nodes.

CVSS base score 8.4 /10
High
CISA KEV
Not listed
Public exploit
None known
Authentication
Not required
EPSS
0.14% chance of exploitation in 30 days
View the NVD record ↗